IpSec VPN: Responder and Initiator peer switch the roles

Hi all!

I'm experiencing a weird situation on three IpSec vpn gateways, 3 tunnels from 3 different branch office to 1 main office firewall (in HA), all the fw are Sophos XGS.

I've configured the main office as responder and all the branch as initiator, all with the same custom policy (beforewe used DefBranch/MainOffice policies, we had some issues with that about multiple disconnections and the same initiator/responder issue).

Ok, anyway the falling vpn issue is resolved with the new policy but the responder/initiator issue remain, they act the opposite of the role: branch office which is the initiator can't start the connection but only respond, main office which is the responder can start the connection.

Any help is apprecieted

Thanks